I’m having issues signing my artifacts since a few days. I did some digging, and somehow the .mender files are incomplete. mender-artifact read shows the rootfs image is over 200MB big, but the .mender file itself is only 90MB. I’m using version 2 of the artifact format.
The mender-artifact version is 3.0.1. Am I missing something obvious?
I already cleared out the cache of my yocto installation twice.
Did some investigation: If the artifact is less than 1M, than it should work with 3.0.1. If it’s larger, than unfortunately you cannot sign a directory artifact with that command (2.4.1 lacks the functionality, and 3.0.1 has the bug). However, you can sign it with 3.0.1 while making the initial artifact, like this:
You may get a message that the verification fails with the provided key, but this is just because the directory-artifact-gen script isn’t smart enough to pass the correct key to mender-artifact. You can verify it manually with mender-artifact read -k public.key <ARTIFACT>.